Enable environment variables to set an id-token

[doodzik]

Cosign has the ability to detect and use ambient OIDC from exec envs. This is quite convenient and we would stand to benefit from adding it. See sigstore/cosign#644 for reference.